PT-2018-17041 · F5 · F5 Big-Ip Apm Clients

Publicado 2018-08-17 · Atualizado 2019-10-09 · CVE-2018-5547

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions F5 BIG-IP APM client versions prior to 7.1.7.1 for Windows

Description The Windows Logon Integration feature of the F5 BIG-IP APM client uses Legacy logon mode by default, which allows unprivileged users to potentially gain administrator privileges. This occurs when the APM client is installed by an administrator on a user machine, and the user accesses the local machine. The vulnerability is exploited through the certificate user interface dialog box, which contains a link to the certificate policy. By clicking on this link, users can open additional dialog boxes and access the local machine's Windows Explorer, ultimately leading to elevated privileges.

Recommendations For versions prior to 7.1.7.1, update to version 7.1.7.1 or later to resolve the issue. As a temporary workaround, consider disabling the Windows Logon Integration feature until a patch is available. Restrict access to the local machine to minimize the risk of exploitation. Avoid using the Legacy logon mode in the APM client until the issue is resolved.

Correção

Missing Authorization

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2018-5547

Produtos afetados

F5 Big-Ip Apm Clients

Referências · 5

• https://osv.dev/vulnerability/CVE-2018-5547 · Aviso do Fabricante
• https://support.f5.com/csp/article/K10015187 · Aviso do Fabricante
• http://securitytracker.com/id/1041511 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-5547 · Nota de Segurança
• https://support.f5.com/csp/article/K10015187?utm_source=f5support&amp%3Butm_medium=RSS · Nota